Senior Information Security Analyst

Responsibilities

• Lead or execute security control assessments and continuous monitoring activities for assigned systems and portfolios.
• Analyze vulnerability scans, IAVMs, configuration baselines, security-control evidence, and remediation status to determine control effectiveness and mission risk.
• Conduct or support authorized secure code review, penetration testing, and security evaluation activities and document technical results.
• Develop assessment plans, findings, final reports, vulnerability and drift reporting, POA&M recommendations, and quarterly AO reporting inputs.
• Cookordination with system owners and site stakeholders to deconflict scan windows, testing, maintenance periods, and field-training schedules.
• Validate remediation actions, conduct retests, and ensure findings are evidence-traceable and mapped to governing controls.
• Mentor/support Journeyman-level personnel as assigned and help enforce technical and quality standards.

Requirements

• US. citizenship.
• DoD 8140 /cyberspace workforce qualification: IAT Level III or applicable CSSP/DCWF role.
• Certification: CISSP, CEH, or other Government-accepted certification meeting the required 8140 work role.
• 3+ years conducting DoW network assessments.
• 5+ years performing secure code reviews.
• 2+ years performing penetration testing.
• 3+ years performing security evaluations.
• 1+ year experience supporting DoW expeditionary network environments of similar size and complexity to the customer's Cyberspace Environment.
• Able to meet current DoW, DoN, and USMC privileged-access, background investigation, training, and least-privilege requirements.

Desired

• Garrison-to-tactical architecture experience; OCONUS execution experience.
• Strong written communication for AO-level risk reporting.

Performance Expectations

• Produce complete, accurate, evidence-traceable assessment products in accordance with the SOW, approved QCP, Government formats, and established delivery timelines.
• Escalate critical/high or mission-impacting issues through Quantum Sky program leadership in accordance with the approved governance and escalation process.
• Protect classified information, CUI, Government property, credentials, and assessment data in accordance with contract and local security requirements.
• Operate within the non-personal-services construct; Government personnel provide requirements, priorities, surveillance, and acceptance, while Quantum Sky management directs contractor personnel.

Qualifications

• Complete and maintain required initial/annual NIPRNET account training, including Cyber Awareness, OPSEC, and Privacy/PII.
• Complete applicable SIPRNET training, including Derivative Classification and local SIPRNET user agreements; NATO Secret briefing if mission-required.
• Maintain required CAC/DBIDS/site-access credentials and comply with DISS visit request requirements.
• Maintain valid passport/visa/driver documentation when required by the duty location or travel assignment.